DEF CON 25 Hacking Conference

Saturday

10:00

• 101 Track

  ---

  Persisting with Microsoft Office: Abusing Extensibility Options

  William Knowles

  

• Track Two

  ---

  $BIGNUM Steps Forward, $TRUMPNUM Steps Back: How Can We Tell If We’re Winning?

  Cory Doctorow

• Track Three

  ---

  Get-$pwnd: Attacking Battle-Hardened Windows Server

  Lee Holmes

  

• Track Four

  ---

  The Spear to Break the Security Wall of S7CommPlus

  Cheng

  

10:30

• 101 Track

  ---

  Breaking Wind: Adventures in Hacking Wind Farm Control Networks

  Jason Staggs

• Track Two

  ---

  $BIGNUM Steps Forward, $TRUMPNUM Steps Back: How Can We Tell If We’re Winning? (cont.)

  Cory Doctorow

• Track Three

  ---

  WSUSpendu: How to Hang WSUS Clients

  Romain Coltel & Yves Le Provost

  

• Track Four

  ---

  (Un)Fucking Forensics: Active/Passive (i.e. Offensive/Defensive) Memory Hacking/Debugging.

  K2

  

11:00

• 101 Track

  ---

  Microservices and FaaS for Offensive Security

  Ryan Baxendale

  

• Track Two

  ---

  Secure Tokin’ and Doobiekeys: How to Roll Your Own Counterfeit Hardware Security Devices

  Joe FitzPatrick & Michael Leibowitz

  

• Track Three

  ---

  If You Give a Mouse a Microchip... It Will Execute a Payload and Cheat At Your High-stakes Video Game Tournament

  skud (Mark Williams) & Sky (Rob Stanley)

  

• Track Four

  ---

  Evading Next-Gen AV Using Artificial Intelligence

  Hyrum Anderson

  

11:30

• 101 Track

  ---

  Abusing Webhooks for Command and Control

  Dimitry Snezhkov

  

• Track Two

  ---

  Secure Tokin’ and Doobiekeys: How to Roll Your Own Counterfeit Hardware Security Devices (cont.)

  Joe FitzPatrick & Michael Leibowitz

• Track Three

  ---

  If You Give a Mouse a Microchip... It Will Execute a Payload and Cheat At Your High-stakes Video Game Tournament (cont.)

  skud (Mark Williams) & Sky (Rob Stanley)

• Track Four

  ---

  All Your Things Are Belong To Us

  Zenofex, 0x00string, CJ_000, & Maximus64

  

12:00

• 101 Track

  ---

  Driving down the rabbit hole

  Mickey Shkatov, Jesse Michael, & Oleksandr Bazhaniuk

  

• Track Two

  ---

  When Privacy Goes Poof! Why It’s Gone and Never Coming Back

  Richard Thieme a.k.a. neuralcowboy

• Track Three

  ---

  DNS - Devious Name Services - Destroying Privacy & Anonymity Without Your Consent

  Jim Nitterauer

• Track Four

  ---

  All Your Things Are Belong To Us (cont.)

  Zenofex, 0x00string, CJ_000, & Maximus64

13:00

• 101 Track

  ---

  Demystifying Windows Kernel Exploitation by Abusing GDI Objects.

  5A1F (Saif El-Sherei)

  

• Track Two

  ---

  Koadic C3 - Windows COM Command & Control Framework

  Sean Dillon (zerosum0x0) & Zach Harding (Aleph-Naught-)

  

• Track Three

  ---

  Twenty Years of MMORPG Hacking: Better Graphics, Same Exploits

  Manfred (@_EBFE)

  

• Track Four

  ---

  A Picture is Worth a Thousand Words, Literally: Deep Neural Networks for Social Stego

  Philip Tully & Michael T. Raggo

  

14:00

• 101 Track

  ---

  Attacking Autonomic Networks

  Omar Eissa

  

• Track Two

  ---

  Trojan-tolerant Hardware & Supply Chain Security in Practice

  Vasilios Mavroudis & Dan Cvrcek

  

• Track Three

  ---

  Linux-Stack Based V2X Framework: All You Need to Hack Connected Vehicles

  p3n3troot0r (Duncan Woodbury) & ginsback (Nicholas Haltmeyer)

  

• Track Four

  ---

  XenoScan: Scanning Memory Like a Boss

  Nick Cano

  

15:00

• 101 Track

  ---

  MS Just Gave the Blue Team Tactical Nukes (And How Red Teams Need To Adapt)

  Chris Thompson

  

• Track Two

  ---

  Tracking Spies in the Skies

  Jason Hernandez, Sam Richards, & Jerod MacDonald-Evoy

  

• Track Three

  ---

  DOOMed Point of Sale Systems

  trixr4skids

  

• Track Four

  ---

  Digital Vengeance: Exploiting the Most Notorious C&C Toolkits

  Professor Plum

  

16:00

• 101 Track

  ---

  Dealing the Perfect Hand - Shuffling Memory Blocks On z/OS

  Ayoul3

  

• Track Two

  ---

  From “One Country - One Floppy” to “Startup Nation” - The Story of the Early Days of the Israeli Hacking Community, and the Journey Towards Today’s Vibrant Startup Scene

  Inbar Raz & Eden Shochat

• Track Three

  ---

  CableTap: Wirelessly Tapping Your Home Network

  Marc Newlin, Logan Lamb, & Chris Grayson

  

• Track Four

  ---

  Game of Drones: Putting the Emerging “Drone Defense” Market to the Test

  Francis Brown & David Latimer

  

17:00

• 101 Track

  ---

  Here to stay: Gaining persistency by Abusing Advanced Authentication Mechanisms

  Marina Simakov & Igal Gofman

  

• Track Two

  ---

  Taking Windows 10 Kernel Exploitation to the next level - Leveraging write-what-where vulnerabilities in Creators Update

  Morten Schenk

  

• Track Three

  ---

  Introducing HUNT: Data Driven Web Hacking & Manual Testing

  Jason Haddix

  

• Track Four

  ---

  Popping a Smart Gun

  Plore

  

Sunday

10:00

• 101 Track

  ---

  Unboxing Android: Everything You Wanted To Know About Android Packers

  Avi Bashan & Slava Makkaveev

  

• Track Two

  ---

  I Know What You Are by the Smell of Your Wifi

  Denton Gentry

  

• Track Three

  ---

  Breaking Bitcoin Hardware Wallets

  Josh Datko & Chris Quartier

  

• Track Four

  ---

  Untrustworthy Hardware and How to Fix It

  0ctane

  

10:30

• 101 Track

  ---

  Unboxing Android: Everything You Wanted To Know About Android Packers (cont.)

  Avi Bashan & Slava Makkaveev

• Track Two

  ---

  PEIMA (Probability Engine to Identify Malicious Activity): Using Power Laws to address Denial of Service Attacks

  Redezem

  

• Track Three

  ---

  BITSInject

  Dor Azouri

  

• Track Four

  ---

  Ghost in the Droid: Possessing Android Applications with ParaSpectre

  chaosdata

  

11:00

• 101 Track

  ---

  Total Recall: Implanting Passwords in Cognitive Memory

  Tess Schrodinger

• Track Two

  ---

  Backdooring the Lottery and Other Security Tales in Gaming over the Past 25 Years

  Gus Fritschie & Evan Teitelman

• Track Three

  ---

  Exploiting Continuous Integration (CI) and Automated Build systems

  spaceB0x

  

• Track Four

  ---

  Ghost Telephonist’ Impersonates You Through LTE CSFB

  Yuwei Zheng & Lin Huang

12:00

• 101 Track

  ---

  The Black Art of Wireless Post Exploitation

  Gabriel “solstice” Ryan

  

• Track Two

  ---

  Are all BSDs are created equally? A survey of BSD kernel vulnerabilities.

  Ilja van Sprundel

  

• Track Three

  ---

  The Call Is Coming From Inside the House! Are You Ready for the Next Evolution in DDoS Attacks?

  Steinthor Bjarnason & Jason Jones

• Track Four

  ---

  Genetic Diseases to Guide Digital Hacks of the Human Genome: How the Cancer Moonshot Program will Enable Almost Anyone to Crash the Operating System that Runs You or to End Civilization...

  John Sotos

13:00

• 101 Track

  ---

  Game of Chromes: Owning the Web with Zombie Chrome Extensions

  Tomer Cohen

  

• Track Two

  ---

  Bypassing Android Password Manager Apps Without Root

  Stephan Huber & Siegfried Rasthofer

  

• Track Three

  ---

  Malicious CDNs: Identifying Zbot Domains en Masse via SSL Certificates and Bipartite Graphs

  Thomas Mathew & Dhia Mahjoub

• Track Four

  ---

  Revoke-Obfuscation: PowerShell Obfuscation Detection (And Evasion) Using Science

  Daniel Bohannon (DBO) & Lee Holmes

  

14:00

• 101 Track

  ---

  Call the Plumber - You Have a Leak in Your (Named) Pipe

  Gil Cohen

  

• Track Two

  ---

  Weaponizing Machine Learning: Humanity Was Overrated Anyway

  Dan “AltF4” Petro & Ben Morris

  

• Track Three

  ---

  Man in the NFC

  Haoqi Shan & Jian Yuan

  

• Track Four

  ---

  Friday the 13th: JSON attacks!

  Alvaro Muñoz & Oleksandr Mirosh

  

15:00

• 101 Track

  ---

  Bridging the Gap between DC and DEF CON: Fireside Chat with Congressmen James Langevin and Will Hurd

  Rep. James Langevin, Rep. Will Hurd, & Joshua Corman

• Track Two

  ---

  25 Years of Program Analysis

  Zardus (Yan Shoshitaishvili)

  

• Track Three

  ---

• Track Four

  ---

16:30

• 101 Track

  ---

• Track Two

  ---

• Track Three

  ---

  Closing Ceremonies

• Track Four

  ---

  Closing Ceremonies